Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/323830333a616631303a3a2f33322d3332203d3e20323732313232.roa
File:                     323830333a616631303a3a2f33322d3332203d3e20323732313232.roa (raw, json)
Hash identifier:          PrUXshR7u0kS1lF3fu/UXiSrnWx5hDHM8k8hDFmDGYk=
Subject key identifier:   89:10:BF:94:CE:B2:6B:BB:72:B3:37:D9:E5:BC:FB:1C:C9:31:A6:23
Certificate issuer:       /CN=864255909469F50CE15FE2F07B617FAAD2741BE0
Certificate serial:       1C5AFEED618FBB024514A9C3CCF3D016804BCE29
Authority key identifier: 86:42:55:90:94:69:F5:0C:E1:5F:E2:F0:7B:61:7F:AA:D2:74:1B:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/864255909469F50CE15FE2F07B617FAAD2741BE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/323830333a616631303a3a2f33322d3332203d3e20323732313232.roa
Signing time:             Thu 12 Feb 2026 00:30:07 +0000
ROA not before:           Thu 12 Feb 2026 00:25:07 +0000
ROA not after:            Thu 11 Feb 2027 00:30:07 +0000
asID:                     272122
IP address blocks:        2803:af10::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/864255909469F50CE15FE2F07B617FAAD2741BE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 01:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:5a:fe:ed:61:8f:bb:02:45:14:a9:c3:cc:f3:d0:16:80:4b:ce:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=864255909469F50CE15FE2F07B617FAAD2741BE0
        Validity
            Not Before: Feb 12 00:25:07 2026 GMT
            Not After : Feb 11 00:30:07 2027 GMT
        Subject: CN=8910BF94CEB26BBB72B337D9E5BCFB1CC931A623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:35:6f:94:04:54:6a:db:20:7c:94:1f:36:83:
                    ef:38:b3:2f:9a:38:9e:c5:75:30:c0:c6:c8:63:84:
                    5f:46:b9:68:94:7f:7a:9e:70:0f:c6:50:7a:8d:d4:
                    ad:77:54:97:7b:ed:25:36:5d:fb:91:29:0e:cb:0a:
                    c5:00:84:3c:73:76:ad:a6:9a:46:26:96:18:9d:da:
                    33:a9:90:54:29:f5:99:36:a9:bb:40:3e:80:5e:f8:
                    6d:b6:05:3f:ca:7f:fc:d4:75:c4:43:09:23:0a:96:
                    13:18:88:68:69:be:c3:85:ff:fd:1c:1e:39:74:98:
                    b0:7b:73:a2:49:79:03:53:c8:04:17:f5:13:86:e9:
                    10:6c:42:6b:f8:50:81:29:87:06:4a:3c:d1:90:1b:
                    f8:1d:3e:f5:4c:c9:28:c6:5d:55:7a:be:70:bc:06:
                    0d:3e:40:c7:16:29:da:3b:01:f4:80:b6:39:4c:22:
                    52:78:73:83:e0:58:d1:d6:c1:8f:70:a1:c2:f0:b7:
                    c9:a6:04:b9:fa:72:a9:ed:c0:f5:65:86:fe:43:6f:
                    79:d2:a6:80:35:f0:ae:b7:cb:80:86:19:b2:f5:ff:
                    4a:a1:97:63:12:95:da:c5:30:e2:d6:99:b7:20:39:
                    e5:b2:67:c8:9e:b9:38:27:31:52:01:b3:39:f8:e5:
                    77:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:10:BF:94:CE:B2:6B:BB:72:B3:37:D9:E5:BC:FB:1C:C9:31:A6:23
            X509v3 Authority Key Identifier:
                keyid:86:42:55:90:94:69:F5:0C:E1:5F:E2:F0:7B:61:7F:AA:D2:74:1B:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/864255909469F50CE15FE2F07B617FAAD2741BE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/323830333a616631303a3a2f33322d3332203d3e20323732313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:af10::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:f0:79:38:27:90:bf:2d:bb:4d:ef:6d:8a:9b:54:82:8e:a8:
         90:f7:03:2a:0b:c6:f7:1d:cc:69:2d:d5:91:ab:8f:be:e1:3c:
         af:8b:19:99:dc:ab:f2:24:66:f0:34:41:73:07:90:8d:13:a1:
         20:0b:e2:1e:d2:50:b7:5d:81:d4:57:bb:4e:bc:9a:aa:9b:04:
         6b:79:e8:53:06:77:b2:37:9a:fa:cc:8d:f1:ae:25:ec:e3:cb:
         a2:6a:32:d5:7c:53:4a:b8:c8:c1:fa:f5:64:61:73:96:c0:48:
         46:e7:2d:30:da:a9:1a:6c:46:cd:c2:0b:58:64:54:52:91:9c:
         97:73:23:5e:81:5d:54:c4:93:56:52:7c:cb:5c:91:c4:82:9a:
         3a:d3:43:43:5b:98:3d:b9:bb:66:10:cf:94:13:5a:fb:03:d2:
         b3:d8:22:1c:be:4d:e3:9f:7a:f4:38:5d:72:b3:dd:a7:c7:34:
         b2:39:f8:7a:88:15:a8:ad:f7:49:5b:b6:fd:48:f1:b0:12:62:
         c6:ba:7b:48:ff:13:eb:9e:40:c0:54:d8:b0:63:5e:a5:5c:81:
         0b:9b:4e:2f:2c:98:83:e6:4b:fe:93:4b:2a:33:c0:a2:03:54:
         60:2c:a9:f5:22:8a:cb:7a:d0:32:34:cc:7a:79:a8:63:d5:45:
         29:3c:b2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:20:40 2026 by rpki-client